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A precise characterization is given for the class of security policies enforceable with 
mechanisms that work by monitoring system execution, and automata are introduced for 
specifying exactly that class of security policies. Techniques to enforce security policies 
specified by such automata are also discussed. 
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Program vulnerabilities leave organizations open to malicious attacks that can result in 
severe damage to company finances, resources, consumer privacy, and data. Engineering 
applications and systems so that vulnerabilities do not exist would be the best solution, 
but this strategy may be impractical due to fiscal constraints or inadequate knowledge. 
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Therefore, a variety of program and system-based solutions have been proposed to deal 
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The United States Department of Defense (DoD) has, over the past several years, 
emphasized the need to employ simulation based acquisition (SBA) in engineering and 
development. Distributed simulation introduces an information assurance challenge and 
details of a simulation must be guarded from unauthorized access. The High Level 
Architecture (HLA) and its Run-Time Interface (RTI) do not define support of mandatory 
access controls (MACs) or discretionary access controls (DACs) required to provide ... 
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Smart cards are embedded systems which are used in an increasing number of secure 
applications. As they store and deal with confidential and secret data many attacks are 
performed on these cards to reveal this private information. Consequently, the security 
demands on smart cards are very high. It is mandatory to evaluate the security of the 
design but this is performed often very late in the design process or when the chip has 
already been manufactured. This paper presents a hierarchical securi ... 
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Simulation is a low cost alternative to experimentation on real-world physical systems. 
Grid technology enables coordinated use of and secure access to distributed computing 
resources and data sources. The service-oriented architecture (SOA) is an ideal paradigm 
for next generation computing. The loose coupling among services in the SOA relieves 
service consumers from detailed knowledge of implementation, implementation language, 
and execution platform of the services to be consumed. In this pap ... 
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This paper presents a new current flattening technique applicable in software and 
hardware. This technique is important in embedded cryptosystems since power analysis 
attacks (that make use of the current variation dependency on data and program) 
compromise the security of the system. The technique flattens the current internally by 
exploiting current consumption differences at the instruction level. Code transformations 
supporting current variation reductions due to program dependencies are pre ... 

Keywords: current flattening, hardware architecture, power analysis attacks 



8 Manufacturing ap plications: production management IV: Database-intensive process Q 
s i m u I a tion at the Y-12 national security complex 
Reid Kress, Karen Bills, Jack Dixon, Richard Rinehart 

December 2006 Proceedings of the 38th conference on Winter simulation WSC '06 
Publisher: Winter Simulation Conference 

Full text available: 'g] pdf( 588.52 KB) Additional Information: full citation, abstract , references 

The NNSA's Y-12 National Security Complex is a manufacturing facility operated by BWXT 
Y-12. Y-12's missions include ensuring the US' nuclear weapons deterrent, storing nuclear 
materials, and fueling US naval reactors. As a consequence of these missions, Y-12 makes 
dozens of products, having hundreds of parts, each with many different process steps 
associated with manufacturing components, building sub-assemblies, or assembling final 
products. Y-12 also disassembles weapon components to support ... 



9 Se ssion 7A: Bounded-concurrent secure multi-party computation with a dishonest 
majority 
Rafael Pass 

June 2004 Proceedings of the thirty-sixth annual ACM symposium on Theory of 
computing STOC '04 

Publisher: ACM Press 

Full text available* IB pdf(246 91 KB). Additional Information: full citation , abstract , references , citings, index 
• |aj ^ terms 

We show how to securely realize any multi-party functionality in a way that preserves 
security under an a-priori bounded number of concurrent executions, regardless of the 
number of corrupted parties. Previous protocols for the above task either rely on set-up 
assumptions such as a Common Reference String, or require an honest majority. Our 
constructions are in the plain model and rely on standard intractability assumptions 
(enhanced trapdoor permutations and collision resistant hash functions). ... 

Keywords: concurrent composition, constant-round protocols, secure multi-party 
computation, simulation-sound zero-knowledge 
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^ Yehuda Lindell 

June 2003 Proceedings of the thirty-fifth annual ACM symposium on Theory of 
computing STOC '03 

Publisher: ACM Press 

Full text available* t 5 ! pdf(338 32 KB) AcJd ' tional Information: full citation , abstract , references , citings , index 
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In this paper we study the feasibility of obtaining protocols for general two-party 
computation that remain secure under concurrent composition. (A general protocol can be 
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used for obtaining secure computation of any functionality.) We consider a scenario where 
no trusted setup is assumed (and so, for example, there is no common reference string 
available to the parties); we call this the "plain model". We present both negative and 
positive results for this model. Specifically, we show th ... 

Keywords: protocol composition, secure computation 



11 A network technique to achieve program and data security with nominal 
commun ication s overhead 
J. R. Driscoll, H. N. Srinidhi, T. S. Chesser 

November 1986 Proceedings of 1986 ACM Fall joint computer conference ACM '86 
Publisher: IEEE Computer Society Press 

Full text available: ^[pdff 731 . 27 KB ) Additional Information: full citation , references , index terms 



12 On the composi tion of authenticated B yzantine Ag reement 
Yehuda Lindell, Anna Lysyanskaya, Tal Rabin 
November 2006 Journal of the ACM (JACM), volume 53 issue 6 

Publisher: ACM Press 

Full text available: *g| pdf( 415.67 KB ) Additional Information: full citation , abstract , referenc es, index terms 

A fundamental problem of distributed computing is that of simulating a secure broadcast 
channel, within the setting of a point-to-point network. This problem is known as 
Byzantine Agreement (or Generals) and has been the focus of much research. Lamport et 
al. [1982] showed that in order to achieve Byzantine Agreement in the plain model, more 
than two thirds of the participating parties must be honest. They further showed that by 
augmenting the network with a public-key infrastructure for digital ... 

Keywords: Authenticated Byzantine Agreement, lower bounds, protocol composition, 
randomized protocols 



13 Anonymity s ystems & formal method: Specif ying and analyzing security automata 
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^ David Basin, Ernst-Ruediger Olderog, Paul E. Sevinc 

March 2007 Proceedings of the 2nd ACM symposium on Information, computer and 
communications security ASIACCS '07 

Publisher: ACM Press 

Full text available: 1 ^ pdf( 305 .81 KB) Additional Information: fu ll citation , abstract , references , index terms 

Security automata are a variant of Buchi automata used to specify security policies that 
can be enforced by monitoring system execution. In this paper, we propose using CSP- 
OZ, a specification language combining Communicating Sequential Processes (CSP) and 
Object-Z (OZ), to specify security automata, formalize their combination with target 
systems, and analyze the security of the resulting system specifications. We provide 
theoretical results relating CSP-OZ specifications and security auto ... 

Keywords: CSP-OZ, security automata 
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computing STOC '04 

Publisher: ACM Press 

Full text available* t 51 ) pdf(253 45 KB) Additional Information: fu ll citation , abstract , references , citings, index 
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We propose a modification to the framework of Universally Composable (UC) security [3], 
Our new notion involves comparing the real protocol execution with an ideal execution 
involving ideal functionalities (just as in UC-security), but allowing the environment and 
adversary access to some super-polynomial computational power. We argue the 
meaningfulness of the new notion, which in particular subsumes many of the traditional 
notions of security. We generalize the Universal Composition theorem of ... 

Keywords: environmental security, general composition, generalized environmental 
security, secure multi-party computation, secure protocols, simulation, universal 
composability 



15 Workshop on ar chitectural su p port for security and anti-virus (WASSA): ChipLock: 
<§> support for secu re microarchitectures 

^ Taeho Kgil, Laura Falk, Trevor Mudge 

March 2005 ACM SIGARCH Computer Architecture News, volume 33 issue l 

Publisher: ACM Press 

Full text available: *Q.p.df(256^2J<B). Additional Information: ful l citation , abstract , refere nces, index terms 

The increasing need for security has caused system designers to consider placing some 
security support directly at the hardware level. In fact, this is starting to emerge as an 
important consideration in processor design, because the performance overhead of 
supporting security in hardware is usually significantly lower than a complete software 
solution. In this paper, we investigate integrating some security support into hardware. 
We show that security support can be added at some acceptable cos ... 

16 Development of processors and communication networks for embedded systems: 
System design methodologies for a wireless security processing platform 
Srivaths Ravi, Anand Raghunathan, IMachiketh Potlapally, Murugan Sankaradass 

June 2002 Proceedings of the 39th conference on Design automation DAC '02 

Publisher: ACM Press 

Full text available* f 51 ) pdf(207 37 KB) Additional Information: f ull citation , abstract , references , citings, index 
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Security protocols are critical to enabling the growth of a wide range of wireless data 
services and applications. However, they impose a high computational burden that is 
mismatched with the modest processing capabilities and battery resources available on 
wireless clients. Bridging the security processing gap, while retaining sufficient 
programmability in order to support a wide range of current and future security protocol 
standards, requires the use of novel system architectures and design m ... 

Keywords: 3DES, AES, DES, IPSec, RSA, SSL, decryption, design methodology, 
embedded system, encryption, handset, performance, platform, security, security 
processing, system architecture, wireless 
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Publisher: ACM Press 
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In this work, we propose and investigate the idea of enhancing a System-on-Chip (SoC) 
communication architecture (the fabric that integrates system components and carries the 
communication traffic between them) to facilitate higher security. We observe that a wide 
range of common security attacks are manifested as abnormalities in the system-level 
communication traffic. Therefore, the communication architecture, with its global system- 
level visibility, can be used to detect them. The communicati ... 

Keywords: AMBA Bus, access control, architecture, attacks, bus, communication, digital 
rights management (DRM), intrusion detection, security, security-aware design, small 
embedded systems, system-on-chip (SoC) 
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S ession 14A: Concurrent general composition of secure protocols in the timin g model Q 
Yael Tauman Kalai, Yehuda Lindell, Manoj Prabhakaran 

May 2005 Proceedings of the thirty-seventh annual ACM symposium on Theory of 
computing STOC '05 

Publisher: ACM Press 

Full text available: ^Ej pdf ( 263.20 KB ) Additional Information: full citation , abstract , references , index terms 

In the setting of secure multiparty computation, a set of mutually distrustful parties wish 
to jointly compute some function of their input (i.e., they wish to securely carry out some 
distributed task). %The joint computation should be such that even In the stand-alone 
case, it has been shown that every efficient function can be securely computed. However, 
in the setting of concurrent composition, broad impossibility results have been proven for 
the case where there is no honest majority ... 

Keywords: cryptography, protocol composition, secure multiparty computation 



20 Ar chitectures for cr y pto graph y and security a pplications: Simulation models for side- jjj 

channel infor mation leaks 
^ Kris Tiri, Ingrid Verbauwhede 

June 2005 Proceedings of the 42nd annual conference on Design automation DAC '05 

Publisher: ACM Press 

Full text available: ^|.pdf(2_44.28_KB) Additional Information: full citation , abstra ct, references , index ter ms 

Small, embedded integrated circuits (ICs) such as smart cards are vulnerable to so-called 
side-channel attacks (SCAs). The attacker can gain information by monitoring the power 
consumption, execution time, electromagnetic radiation and other information that is 
leaked by the switching behavior of digital CMOS gates. Ever since power attacks have 
been introduced in 1999, many countermeasures have been proposed. Often a significant 
increase in security has been touted. We will show that in order t ... 

Keywords: countermeasure, differential power analysis, encryption, security IC, side- 
channel attack, simulation model, smart card 
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1 Ad hoc network s and RFID (work in pro g ress): Improved topology assumptions for 
th reshold cryptograph y in mobile ad hoc networks 
Giovanni Di Crescenzo, Renwei Ge, Gonzalo R. Arce 

November 2005 Proceedings of the 3rd ACM workshop on Security of ad hoc and 

sensor networks SASN '05 
Publisher: ACM Press 

Full text available: l g|pdf( 281.49 KB ) Additional Information: full citation , abstract, references , index terms 

Mobile Ad Hoc Networks (MANET), due to their lack of physical infrastructures or 
centralized authorities, pose a number of security challenges to a protocol designer. In 
particular, several typical application scenarios demand the design of protocols that 
cannot base their security on the existence of trusted parties or setup information, but 
rather need to leverage uniquely on assumptions limiting the corrupting power of the 
adversaries. This naturally defines security design and analysis parad ... 



Keywords: distributed cryptography, mobile ad hoc networks, threshold cryptography, 
threshold signatures 



2 RFID & watermarkin g : Universally composable and forward-secure RFID 

authen tication and authenticated key exchan ge 
^ Tri Van Le, Mike Burmester, Breno de Medeiros 

March 2007 Proceedings of the 2nd ACM symposium on Information, computer and 
communications security ASIACCS '07 

Publisher: ACM Press 

Full text available: t gjpdf( 367.90 KB ) Additional Information: full citation , abstract , references , index terms 

Recently, a universally composable framework for RFID authentication protocols providing 
availability, anonymity, and authenticity was proposed. In this paper we extend that 
framework to address forward-security issues in the presence of key compromise. We also 
introduce new, provably secure, and highly practical protocols for anonymous 
authentication and key-exchange by RFID devices. The new protocols are lightweight, 
requiring only a pseudo-random bit generator. The new protocols satisfy forwar ... 

Keywords: RFID authentication and key-exchange protocols, anonymity, forward- 
security, universal composability 



http://portal.acm.org/results.cfm^ 6/7/2007 



Results (page 1): simulating execution security server 



Page 2 of 6 



3 Web-based and Java- based simulation: Web-based simulation mana g ement: a web- 
b a sed inter face for storing and execut ing simulation models 

Ashu Guru, Paul Savory, Robert Williams 

December 2000 Proceedings of the 32nd conference on Winter simulation WSC '00 
Publisher: Society for Computer Simulation International 

Full text available: ^ pdf(181.99 KB) Additional Information: full citation , abstract , references , citing s 

The dominance of the Internet in the development of information and communication 
technology has made Web-based distributed solutions increasingly attractive. Apart from 
providing other services, the World Wide Web is being looked upon as an environment for 
hosting modeling and simulation applications. SIMAN is a simulation language that allows 
users to simulate discrete and continuous systems. In this research, a web-based 
interface or toolkit has been developed for storing and executing SIMAN ... 

4 Military applicatio ns: Security issues in hi g h level architecture based distributed 
simulation 

Asa Elkins, Jeffery W. Wilson, Denis Gracanin 

December 2001 Proceedings of the 33nd conference on Winter simulation WSC '01 
Publisher: IEEE Computer Society 

Full text available: ^| pdf(262.26 KB) Additional Information: full citation , abstract , references , index terms 

The United States Department of Defense (DoD) has, over the past several years, 
emphasized the need to employ simulation based acquisition (SBA) in engineering and 
development. Distributed simulation introduces an information assurance challenge and 
details of a simulation must be guarded from unauthorized access. The High Level 
Architecture (HLA) and its Run-Time Interface (RTI) do not define support of mandatory 
access controls (MACs) or discretionary access controls (DACs) required to provide ... 

5 H ome I a n d security/emergency respon se: simulation for emer g enc y mana g ement: 
Integrat ed simulation and gamin g architecture for incident mana g ement training 
Sanjay Jain, Charles R. McLean 

December 2005 Proceedings of the 37th conference on Winter simulation WSC '05 
Publisher: Winter Simulation Conference 

Full text available; 'gj pdf (249.50 KB) Additional Information: full citation , abstract , references 

The simulation-based training systems that are available or under development today for 
incident management are typically focused on macro level sequence of events. A few 
systems targeted at individual responders are under development using a gaming 
environment. Separate uses of such systems provide disparate experiences to decision 
makers and individual responders. There is a need to provide common training 
experiences to these groups for better effectiveness. This paper presents a novel 
approa ... 

6 Forma I modeling of active network nodes usin g PVS 
Cindy Kong, P. Alexander, Darryl Dieckman 

>^ August 2000 Proceedings of the third workshop on Formal methods in software 
practice FMSP 'OO 
Publisher: ACM Press 

Full text available: ^ pdf(440.28 KB) Additional Information: fu ll citation , abstract , references , index ter ms 

Active Networks are a new type of networks where all elements are programmable. Active 
packets can contain fragments of code to be executed on intermediate nodes they pass 
through. Active nodes provide the necessary environment and resources for the packets 
to be processed. In giving the users the capability to program the network as they desire, 
there is an issue of security risks. This paper presents a formal model for an active node 
that can be used to specify and verify the correct oper ... 
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An o ptimally robust hybrid mix network 
Markus Jakobsson, Ari Juels 

August 2001 Proceedings of the twentieth annual ACM symposium on Principles of 
distributed computing PODC '01 

Publisher: ACM Press 

Full text available* ■f 5, l pdf(858 02 KB) Additional Information: full citation , abstract , references , citings, index 
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We present a mix network that achieves efficient integration of public-key and symmetric- 
key operations. This hybrid mix network is capable of natural processing of arbitrarily long 
input elements, and is fast in both practical and asymptotic senses. While the overhead in 
the size of input elements is linear in the number of mix servers, it is quite small in 
practice. In contrast to previous hybrid constructions, ours has optimal robustness, that 
is, robustness against any minority coa ... 

Cryptographic protocols/ network security: Securit y proofs for an efficient password- 
ba sed key_excJiang e 

Emmanuel Bresson, Olivier Chevassut, David Pointcheval 

October 2003 Proceedings of the 10th ACM conference on Computer and 

communications security CCS '03 
Publisher: ACM Press 

Full text available* ^^6^233 51 KB) Add ' tional Information: full citation , abstract , references , citings, index 
' " : terms 

Password-based key exchange schemes are designed to provide entities communicating 
over a public network, and sharing a (short) password only, with a session key (e.g, the 
key is used for data integrity and/or confidentiality). The focus of the present paper is on 
the analysis of very efficient schemes that have been proposed to the IEEE P1363 
Standard working group on password-based authenticated key-exchange methods, but 
which actual security was an open problem. We analyze the AuthA key excha ... 

Keywords: key exchange, password-based authentication 



9 Au rora :_Atl Approa ch to Hi g h Throu ghp ut Parallel Simulation 
Alfred Park, Richard M. Fujimoto 

May 2006 Proceedings of the 20th Workshop on Principles of Advanced and 
Distributed Simulation PADS '06 

Publisher: IEEE Computer Society 

Full text available: ^ pdf( 333.08 KB ) Additional Information: f ull citation , abstract , index terms 

A master/worker paradigm for executing large-scale parallel discrete event simulation 
programs over networkenabled computational resources is proposed and evaluated. In 
contrast to conventional approaches to parallel simulation, a client/server architecture is 
proposed where clients (workers) repeatedly download state vectors of logical processes 
and associated message data from a server (master), perform simulation computations 
locally at the client, and then return the results back to the serv ... 

10 Java-based quer y driven simulation environment 
Rajesh S. Nair, John A. Miller, Zhiwei Zhang 

November 1996 Proceedings of the 28th conference on Winter simulation WSC '96 
Publisher: ACM Press, IEEE Computer Society 

Full text available: ^|pdf( 744.69 KB ) Additional Information: full citation , abstract , references , citings 

The concept of Web-based simulation can be finally realized using Java. We have used 
Java to create a powerful simulation modeling library which is based on the process 
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interaction paradigm. Java threads make it easy for us to implement each process (or 
active entity) as a thread. Our library, JSIM, supports both simulation and animation thus 
rendering the model developer's job easier. An important component of our approach is 
that we integrate our Java Simulator with a Database Management Syste ... 

1 1 Computing, curricula 2001 

September 2001 Journal on Educational Resources in Computing (JERIC) 

^ Publisher: ACM Press 
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13 Ag ent-based modelin g and simulation: Simulation using software a g ents I: linkin g 
spatially explicit parallel continuous and discrete models 

Boleslaw K. Szymanski, Gilbert Chen 

December 2000 Proceedings of the 32nd conference on Winter simulation WSC 'OO 
Publisher: Society for Computer Simulation International 

Full text available: ^[pdf( 22371 KB ) Additional Information: full citation , abstract , references 

This paper advocates the use of mobile agents for linking simulations running on different 
computers. A Mobile Component approach is proposed to enhance reusability of existing 
simulations and to improve efficiency of component based simulations of complex 
systems. A basic unit of the mobile component simulation is a simulation server with a 
communication interface to mobile agents. Each mobile agent links and coordinates 
component's execution. We used this approach to implement a combined Lyme ... 

14 Web and IP based design: IP delivery for FPGAs usin g Ap plets and JHDL 
^ Michael J. Wirthlin, Brian McMurtrey 

>^ June 2002 Proceedings of the 39th conference on Design automation DAC '02 
Publisher: ACM Press 

Full text available: ffi p df d 98.07 KB ) Additional Information: full citation , abstract , references , index terms 

This paper introduces an FPGA IP evaluation and delivery system that operates within 
Java applets. The use of such applets allows designers to create, evaluate, test, and 
obtain FPGA circuits directly within a web browser. Based on the JHDL design tool, these 
applets allow structural viewing, circuit simulation, and netlist generation of application- 
specific circuits. Applets can be customized to provide varying levels of IP visibility and 
functionality as needed by both customer and vendor. 

Keywords: FPGA, JHDL, applet, intellectual property 
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We propose a modification to the framework of Universally Composable (UC) security [3]. 
Our new notion involves comparing the real protocol execution with an ideal execution 
involving ideal functionalities (just as in UC-security), but allowing the environment and 
adversary access to some super-polynomial computational power. We argue the 
meaningfulness of the new notion, which in particular subsumes many of the traditional 
notions of security. We generalize the Universal Composition theorem of ... 

Keywords: environmental security, general composition, generalized environmental 
security, secure multi-party computation, secure protocols, simulation, universal 
composability 
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John T. Gorgone, Paul Gray, Edward A. Stohr, Joseph S. Valacich, Rolf T. Wigand 
June 2006 ACM SIGCSE Bulletin, Volume 38 issue 2 
Publisher: ACM Press 

Full text available: ^ pdf( 868.32 KB ) Additional Information: full citation , abstract , index terms 

This article presents the MSIS 2006 Model Curriculum and Guidelines for Graduate Degree 
Programs in Information Systems. As with MSIS 2000 and its predecessors, the objective 
is to create a model for schools designing or revising an MS curriculum in Information 
Systems. The curriculum was designed by a joint committee of the Association for 
Information Systems and the Association for Computing Machinery. MSIS2006 is a major 
update of MSIS 2000. Features include increasing the number of required c ... 

Keywords: MS career tracks, MS course outlines, MS curriculum 
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Publisher: IEEE Computer Society 
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In this paper we present the design and implementation of a complex view storage 
system model that is suitable for execution on a optimistic parallel simulation engine. 
What is unique over other optimistic systems is that reverse computation as opposed to 
state-saving is used to support the rollback mechanism. In this model, a hierarchy of view 
storage servers are connected to an array of client-side local disks. The term view refers 
to the output or result of a query made on the part of ... 
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19 A dvance s i n Model-Based Testing ( A-MOST 2005): A simulation model of a multi- | 
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Volume 30 Issue 4 
Publisher: ACM Press 

Full text available: ^| pdf( 161.42 KB ) Additional information: full citation , abstract , references , index terms 

Despite the fact that EJB (Enterprise Java Beans) is a widely used technology, research in 
the area of performance modelling of EJB application servers is quite sparse. This paper 
will describe how Workbench™, an advanced simulation modelling tool, can be used to 
build a scalable model of a multi-server EJB system that allows users to input variables 
that describe interactions and their constituent methods, as well as system parameters. 
The model will output the average time for each given ... 

20 Computer s ecurity: Software security vulnerability testing in hostile environments 
Herbert H. Thompson, James A. Whittaker, Florence E. Mottay 

^ March 2002 Proceedings of the 2002 ACM symposium on Applied computing SAC '02 

Publisher: ACM Press 

Full text available* "f 51 ! pdf(547 79 KB) Add'*' 01131 Information: full citation , abstract , references , citin gs, index 
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Traditional Black box software testing can be effective at exposing some classes of 
software failures. Security class failures, however, do not tend to manifest readily using 
these techniques. The problem is that many security failures occur in stressed 
environments, which appear in the field, but are often neglected during testing because of 
the difficulty to simulate these conditions. Software can only be considered secure if it 
behaves securely under all operating environments. Hostile enviro ... 

Keywords: fault injection, software defect, software failure, software security, software 
testing 
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